$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: hJNlZcWVDMyiI6ZCjsyjca4ak3R/5pxbZEuxxtA0d1w= Subject key identifier: 71:B1:6C:6C:1B:24:71:1E:AB:54:AC:FA:14:CF:02:FC:A9:F8:78:C6 Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 23DC9BD17E8CAD94E5E9FF3EBEBCBF9A4AAECDD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 018A Signing time: Thu 26 Mar 2026 01:31:25 +0000 Manifest this update: Thu 26 Mar 2026 01:26:25 +0000 Manifest next update: Sun 29 Mar 2026 12:48:25 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: 5Ifm+oAcngCr0J+rFdzjj1X0C5n730rHlNpvU8Y1Iik=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: QFsczwBLYtZasUqtJF/xZ2xkrtCRnC+5l41701uTMq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:dc:9b:d1:7e:8c:ad:94:e5:e9:ff:3e:be:bc:bf:9a:4a:ae:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Mar 26 01:26:25 2026 GMT Not After : Mar 29 12:48:25 2026 GMT Subject: CN=71B16C6C1B24711EAB54ACFA14CF02FCA9F878C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6c:b2:9a:f8:3d:52:28:1a:a6:da:da:15:7f: 41:ef:20:ac:17:1a:3b:23:db:2d:75:2a:d6:43:53: 81:ce:b8:43:36:4d:bb:44:34:a3:63:3f:5a:9b:30: fc:8f:cf:8f:f8:6f:e0:5d:e8:8b:84:3b:ca:65:5a: f5:87:11:0d:85:30:72:e9:0f:a5:b1:21:b3:a7:3f: c9:9b:f7:cd:70:32:0a:32:78:ca:4a:7c:18:5e:f1: 38:68:2d:5c:18:24:9f:22:94:27:64:ca:56:3a:b4: 5c:06:84:fa:48:b6:a9:4b:02:47:1b:e8:39:7a:82: d8:38:69:d9:46:bd:c0:d3:f9:ba:da:2d:46:29:5a: 48:14:55:e7:e0:b3:55:27:d3:af:33:c1:ed:76:a6: d8:94:e4:62:ec:8d:31:7f:11:22:44:a0:58:28:c3: ca:1f:83:d7:d0:c1:e1:f1:c0:a4:41:9a:ca:a5:75: ea:6e:71:25:f9:26:0a:84:af:f9:fe:05:8a:45:ac: cd:3b:1f:2f:95:3d:27:e8:54:8e:8e:97:3d:74:e3: 1e:e4:f6:8e:bd:a9:7c:ae:96:2f:ba:d7:3c:86:b1: 3f:c3:ee:70:f9:f0:6f:9a:6a:79:43:af:17:f3:2f: 04:12:3d:22:5b:61:eb:c1:93:62:a8:79:b7:08:56: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B1:6C:6C:1B:24:71:1E:AB:54:AC:FA:14:CF:02:FC:A9:F8:78:C6 X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1e:6e:ad:25:68:ba:04:f6:04:96:b0:c5:77:01:76:62:33: 24:a2:e7:8f:2c:f2:af:28:6b:c0:91:ff:fd:e5:f6:44:ce:99: f5:ae:a7:be:ce:3d:45:24:67:26:bd:01:4b:29:0f:11:27:64: ec:e5:f1:5e:c2:1c:9c:5f:e8:5d:d6:d4:93:81:3b:2a:fa:35: 67:04:3f:22:47:ec:05:01:d0:84:31:4d:79:d9:36:01:5a:5b: 62:10:e0:0c:ea:25:17:00:99:24:17:38:2e:0f:e7:6b:98:4a: 1b:9c:0a:d0:67:1b:a5:24:66:72:f8:fd:64:56:32:76:db:43: e2:3d:85:67:8b:ec:15:cb:b7:29:b5:2b:e9:85:9d:80:47:d1: fc:a8:c9:5f:e8:0d:28:cb:89:e9:4b:21:c8:2b:83:bb:ec:8a: b0:36:5f:94:63:f1:f7:2e:2e:b4:e5:54:52:4b:7d:89:58:b5: 3e:aa:cd:7b:ae:89:da:6e:e8:8a:09:d1:cc:a0:ae:d1:7b:a8: 84:45:0b:df:7b:c7:9d:63:10:c3:e3:4f:25:f9:25:05:7a:b7: 8a:bc:a1:90:f2:8c:7e:27:d5:a8:e3:a2:59:30:f8:b8:c3:dd: 69:cc:f5:5a:13:59:8c:88:c8:af:6f:69:02:f2:89:88:0c:36: d5:fd:23:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9yb0X6MrZTl6f8+vry/mkquzdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNjAzMjYwMTI2MjVaFw0yNjAzMjkxMjQ4MjVaMDMxMTAvBgNV BAMTKDcxQjE2QzZDMUIyNDcxMUVBQjU0QUNGQTE0Q0YwMkZDQTlGODc4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbLKa+D1SKBqm2toVf0HvIKwX Gjsj2y11KtZDU4HOuEM2TbtENKNjP1qbMPyPz4/4b+Bd6IuEO8plWvWHEQ2FMHLp D6WxIbOnP8mb981wMgoyeMpKfBhe8ThoLVwYJJ8ilCdkylY6tFwGhPpItqlLAkcb 6Dl6gtg4adlGvcDT+braLUYpWkgUVefgs1Un068zwe12ptiU5GLsjTF/ESJEoFgo w8ofg9fQweHxwKRBmsqldepucSX5JgqEr/n+BYpFrM07Hy+VPSfoVI6Olz104x7k 9o69qXyuli+61zyGsT/D7nD58G+aanlDrxfzLwQSPSJbYevBk2KoebcIVtqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcbFsbBskcR6rVKz6FM8C/Kn4eMYwHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAebq0laLoE9gSWsMV3AXZiMySi548s8q8o a8CR//3l9kTOmfWup77OPUUkZya9AUspDxEnZOzl8V7CHJxf6F3W1JOBOyr6NWcE PyJH7AUB0IQxTXnZNgFaW2IQ4AzqJRcAmSQXOC4P52uYShucCtBnG6UkZnL4/WRW MnbbQ+I9hWeL7BXLtym1K+mFnYBH0fyoyV/oDSjLielLIcgrg7vsirA2X5Rj8fcu LrTlVFJLfYlYtT6qzXuuidpu6IoJ0cygrtF7qIRFC997x51jEMPjTyX5JQV6t4q8 oZDyjH4n1ajjolkw+LjD3WnM9VoTWYyIyK9vaQLyiYgMNtX9IwY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:18 2026 by rpki-client